Encrypt crypted string in AC

Question

Hello All,
I cannot find function in JSAPI that encrypts string with key all the functions for this are deprecated

decryptPassword() how that works you do not provide any key to it.Do we have more information around this topic?I need to decrypt encrypted query parameters by AEM
 
Marcel

jorgeferreira · Accepted Answer

Hey,

Indeed, says deprecated but works normally (build 9359).

The test I've made:

Instance 1:

var firstName = 'John'
var lastName = 'Doe'
var language = 'NL'
var email = 'john.doe@gmail.com';
var key = 'abcdefghijklmnopqrstuvwx12345678'; // key with 32 bytes

logInfo('email= '+cryptString(email, key);
logInfo('firstName= '+cryptString(firstName, key);
logInfo('lastName= '+cryptString(lastName, key);

Result:

lastName= @kwVuNfze15Wy1FYoXboEvQ==
irstName= @HT2m15epsQxgzTPoWnDzgw==
email= @vVyMeUIZPeQkNJ5rVvMJV8ooQvxuHXmZQRNHa9612qM=

Instance 2:

var key = 'abcdefghijklmnopqrstuvwx12345678'; // key with 32 bytes
var firstName = "@HT2m15epsQxgzTPoWnDzgw=="
var lastName = "@kwVuNfze15Wy1FYoXboEvQ=="
var email = "@vVyMeUIZPeQkNJ5rVvMJV8ooQvxuHXmZQRNHa9612qM="


logInfo("email: " + decryptString(email, key));
logInfo("firstName: " + decryptString(firstName, key));
logInfo("lastName: " + decryptString(lastName, key));

result:

firstName: John
lastName: Doe
cemail: john.doe@gmail.com

I used 2 instances to eliminate any possibility of the function using the instance ID as key.

jorgeferreira · Answer

Hello Marcel,

I have been through some rough terrains with cryptString and decryptString as well.

For your specific question, I assume decryptPassword only works for external accounts because the key is the instanceID.

If you check the doc on cryptString, one of the remarks is:

This string is encrypted using the AES algorythm in Cipher Block Chaining (CBC) mode with a null initialization vector. If no key is provided as a parameter, the instance key is used.

Sign up

Login with SSO

Login to the community

Login with SSO